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a.) Amendments to Specification 

Replace the paragraph beginning at page /, line 12, in the specification as originally 
filed, with the fallowing rewritten paragraph: 

"With advances in integrated circuit, microprocessor, networking and 
communication technologies, €SFt increasing number numbers of devices, in particular, 
digital computing devices, are being networked together. Devices are often first coupled 
to a local area network, such as an Ethernet based office/home network. In turn, the local 
area networks are interconnected together through wide area networks, such as SONET 
networks, ATM networks, Frame Relays, and the like. Of particular notoriety importance 
is the TCP/IP based global inter-networks, Intemet.- 



Replace the paragraph beginning at page 1, line 19, in the specification as originally 
filed, with the fi}llowing rewritten paragraph: 

-As a result this trend of increased connectivity, .an increasing tmRbef numbers ^ 
of applications that are network dependent are being deployed. Examples of these 
network dependent applications include but are not limited to, email, net based telephony, 
world wide web and various types of e-commerce. For these applications, success 
inherently means high volume of network traffic for their implementing servers. To 
ensure continuing success, quality of service through orderly and efficient handling of the 
large volume of network traffic has become of paramount importance. Various subject 
mailers, such as scalability, distributive deployment and caching of contents as well as 
preventing network misuse have become of great interest to the artisan.— 



Replace the paragraph beginning at page 2, line 1 7, in the specification as originally 
filed, with the fi)llowing rewritten paragraph: 

-An apparatus is equipped to receive descriptive data for network traffic. In one 
embodiment, the apparatus is equipped to conditionally modify timing data of the 
network traffic to conform the timing data to the timing patterns of previously deleted 
network traffic, when iti§ determined that the timing data of the network traffic are 
aberrations. Further, the apparatus is equipped with a query facility that supports a 
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network oriented query language. The language includes specific network oriented 
language elements — 

Replace the paragraph beginning at page P, line P, in the specification as originally filed, 
with the fallowing rewritten paragraph: 

-Referring now also to Figure 2, wh e r e in a flow chart illustrating the operational 
flow of the relevant aspects of data collector 102, in accordance with one embodiment, is 
shown. As illustrated, at block 202, data collector 102 receives a "reporting" of 
descriptive data associated with certain network traffic of interest. The descriptive data 
may be provided by a routing device routing network traffic, a sensor sensing or 
monitoring network traffic being routed, or other devices of the like. The provision may 
be made as part of a periodic reporting that the routing or sensor device is configured to 
make periodically, or the provision may be made in response to an inquiry by data 
collector 102, or at the direction of a "director" device directing distributed network 
traffic management. One example of such "director" device is described in co-pending 
U.S. patent applications, number 09/631,898, entitled "A Distributed Solution For 
Regulating Network Traffic", filed on August 4, 2000, and number 09/685,5 1 8, entitled 
"Progressive and Distributed Regulation of Selected Network Traffic Destined for a 
Network Node", filed on October 9, 2000. These applications are hereby fiilly 
incorporated by reference.— 

Replace the paragraph beginning at page 11, line 3, in the specification as originally 
filed, with the fjllowing rewritten paragraph: 

"At block 212, either upon determining that the timing data is are consistent or 
the making of the adjustment, data collector 102 saves the descriptive data into the 
temporal and/or persistent storage 1 04-1 06. For the embodiment, data collector 212 also 
converts and saves the received data in a common format to facilitate more efficient 
operation for subsequent query processing. Further, at block 214, data collector 214 
updates the adjustment data it employs to "auto correct" the timing data, based on the 
timing data of the received network traffic data.— 

Replace the paragraph beginning at page 25, line 2 3, and ending at page 26, line 5, in the 
specification as originally filed, with the following rewritten paragraph: 
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-In one embodiment, as part of controlling the execution, query execution engine 
1 14 also automatically amplifies the selected data, if the selected data was were collected 
by the reporting/monitored device on a sampling basis. For the illustrated embodiment, 
query execution engine 1 14 also analyzes the data to determine the sampling ratio, and 
amplifies accordingly. For example, in querying for packet count during a time period, 
upon determining that the packet count data was were collected on a "1 of 10" sampling 
method, query execution engine 1 14 automatically amplifies the packet count data by 
lOx. In alternate embodiments, non-corresponding, i.e. amplification that is larger or 
smaller than the sampling ratio, may also be supported.— 
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